This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T5CsmveLHlTzWePoPAmVwyBlyHw.roa File: T5CsmveLHlTzWePoPAmVwyBlyHw.roa (raw, json) Hash identifier: U8tyOkrOksHFOmYCub1BUVzb+vOK+RP6kreSxZTQOpc= Subject key identifier: 4F:90:AC:9A:F7:8B:1E:54:F3:59:E3:E8:3C:09:95:C3:20:65:C8:7C Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F846B18951A02DDF967D2184578A272 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T5CsmveLHlTzWePoPAmVwyBlyHw.roa Signing time: Fri 02 Jan 2026 16:22:23 +0000 ROA not before: Fri 02 Jan 2026 16:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 31.58.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6b:18:95:1a:02:dd:f9:67:d2:18:45:78:a2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f90ac9af78b1e54f359e3e83c0995c32065c87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:bb:a7:75:7c:40:82:f6:8b:96:e7:08:97: c7:f5:2d:b1:f2:7d:fd:77:d4:e0:ee:a2:39:f5:9c: 01:e4:d6:ea:48:bf:77:e6:fa:ee:61:29:4f:57:b3: 28:2a:c8:e8:67:e1:ff:92:4a:da:c8:58:e5:88:62: ad:34:a6:e9:48:3b:7c:43:86:d7:76:99:45:39:0c: 2e:6e:8c:6b:02:d6:95:32:c9:1c:88:52:97:54:4b: 86:b4:e7:d7:6d:b4:55:7a:7b:ee:5b:fb:ce:50:77: a6:f7:f3:ff:e4:3b:90:60:d6:da:9c:30:ff:dd:1f: 05:e5:a2:76:0e:29:ed:f4:bc:21:80:dc:63:47:43: fb:69:1f:f3:81:d7:a1:a4:d9:20:3b:fc:87:c2:3b: 4e:cc:75:9b:90:66:1e:d1:c1:cf:32:aa:d6:00:78: cc:50:c1:ea:f6:df:43:8a:b6:57:df:42:e0:58:af: 8a:55:47:53:1c:5f:56:36:65:8f:88:9c:c9:e6:88: 8a:e4:83:b3:53:08:e4:88:ea:4b:67:ae:e8:0b:d5: 7d:3f:05:da:e0:6b:4c:74:b0:ee:ea:0b:28:67:d5: a5:10:6d:09:a3:7f:8a:4e:c1:ae:9f:42:74:47:60: 9c:ba:6e:9e:8c:a6:c3:94:2e:94:86:99:bd:af:a0: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:AC:9A:F7:8B:1E:54:F3:59:E3:E8:3C:09:95:C3:20:65:C8:7C X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T5CsmveLHlTzWePoPAmVwyBlyHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.143.0/24 Signature Algorithm: sha256WithRSAEncryption 88:9f:15:ba:7b:67:5b:83:d9:ad:2f:a3:9c:bb:c2:68:ae:69: 1c:ce:d7:54:ac:e5:34:f8:0c:8e:b8:62:a8:28:68:19:42:13: 6e:d5:ce:b2:2d:5b:18:24:86:3b:91:75:85:84:78:45:bd:bf: 3a:28:ba:ad:74:d0:4b:10:a2:0c:1c:6d:2f:95:fd:ec:79:8f: 3b:11:45:ee:26:43:45:0c:ea:74:28:f8:03:2e:0b:41:07:d1: ca:4d:2e:e3:f5:cd:50:40:65:51:9e:9b:bb:b4:84:02:df:b4: 71:fc:02:fe:f7:db:26:fa:0e:d6:0f:f2:08:c6:f1:91:89:e0: f1:20:82:ed:3c:d8:ea:72:cf:45:79:76:81:79:6f:97:4c:72: df:e5:05:0b:84:c6:5c:1e:e1:cf:ed:a4:9f:91:ba:3a:5a:e7: dd:15:a1:4f:69:1e:92:e6:12:9f:d2:90:14:57:2b:dc:b7:28: 9d:3b:ca:62:c7:f7:4d:f2:fb:8b:b8:77:1d:07:d2:64:bc:29: ed:e7:d9:03:8e:55:8a:66:0d:60:ee:cc:26:6c:bb:e5:55:9e: 98:17:ca:a7:5a:e9:50:30:12:0d:43:41:35:4f:24:a8:6c:6c: be:94:aa:69:a5:24:a6:ff:60:8b:78:27:9c:b3:4a:58:83:9c: c0:b0:06:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGsYlRoC3fln0hhFeKJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjkwYWM5YWY3OGIxZTU0ZjM1OWUzZTgzYzA5OTVjMzIwNjVjODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz67p3V8QIL2i5bnCJfH9S2x8n39 d9Tg7qI59ZwB5NbqSL935vruYSlPV7MoKsjoZ+H/kkrayFjliGKtNKbpSDt8Q4bX dplFOQwuboxrAtaVMskciFKXVEuGtOfXbbRVenvuW/vOUHem9/P/5DuQYNbanDD/ 3R8F5aJ2Dint9LwhgNxjR0P7aR/zgdehpNkgO/yHwjtOzHWbkGYe0cHPMqrWAHjM UMHq9t9DirZX30LgWK+KVUdTHF9WNmWPiJzJ5oiK5IOzUwjkiOpLZ67oC9V9PwXa 4GtMdLDu6gsoZ9WlEG0Jo3+KTsGun0J0R2Ccum6ejKbDlC6Uhpm9r6CKeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+QrJr3ix5U81nj6DwJlcMgZch8MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVDVDc212ZUxIbFR6V2VQb1BBbVZ3eUJseUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqPMA0G CSqGSIb3DQEBCwUAA4IBAQCInxW6e2dbg9mtL6Ocu8JormkcztdUrOU0+AyOuGKo KGgZQhNu1c6yLVsYJIY7kXWFhHhFvb86KLqtdNBLEKIMHG0vlf3seY87EUXuJkNF DOp0KPgDLgtBB9HKTS7j9c1QQGVRnpu7tIQC37Rx/AL+99sm+g7WD/IIxvGRieDx IILtPNjqcs9FeXaBeW+XTHLf5QULhMZcHuHP7aSfkbo6WufdFaFPaR6S5hKf0pAU VyvctyidO8pix/dN8vuLuHcdB9JkvCnt59kDjlWKZg1g7swmbLvlVZ6YF8qnWulQ MBINQ0E1TySobGy+lKpppSSm/2CLeCecs0pYg5zAsAbs -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:22 2026 by rpki-client